CVE-2017-18900

Mattermost Server is affected by CSV injection (CVE-2017-18900) in versions prior to 4.1.0, 4.0.4, and 3.10.3, via the compliance report feature. The provided documents indicate the root cause is CSV injection but do not specify exact code paths, vulnerable components, or the fixes/patch version....